isomorphic-git/cors-proxy

Releases20

Frequency5 months 3 weeks

Last Releaseabout 2 months ago

Stars106

Proxy clone and push requests for the browser

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2021-23664NVD↗	< 2.7.1	Jan 21, 2022Friday, 21 January 2022, 20:15	8.6 HIGH	5 MEDIUM
The package @isomorphic-git/cors-proxy before 2.7.1 are vulnerable to Server-side Request Forgery (SSRF) due to missing sanitization and validation of the redirection action in middleware.js.